Method and device for searching and displaying scattered logs

ABSTRACT

A method for searching and displaying scattered logs, comprising: finding out one or more corresponding log data based on a search key word; determining a desired timestamp from the log data, and regarding the log data containing the timestamp as target data; searching a semantic file for related semantic data based on the search key word, and finding out related log data based on the related semantic data; time filtering the related log data to obtain filtered log data; establishing a coordinate system by mapping the target data and the filtered log data onto mapping points of the coordinate system; semantically linking the filtered log data, and dying the filtered log data and the target data; and counting the number of lines related to the target data and the filtered log data, and generating links thereto. The present invention further discloses a device for searching and displaying scattered logs.

TECHNICAL FIELD

Embodiments of the present invention relate to medical imaging, and inparticular to a method and device for searching and displaying scatteredlogs.

BACKGROUND TECHNOLOGY

A log file, a special file or a collection of special files to recordoperational events of a computer system, mainly records every incidenthappening to the computer system, including startup, running andshutdown of various services. The log file includes an applicationprogram part, a security part and a system part, etc. A log file iscreated for the purpose of tracking a system or a user's behavior, andfast troubleshooting and solution determination.

One scan or one examination, which is referred to in the field ofmedical imaging, means a scan on a patient using a medical imagingdevice (for example, a CT device, a MRI device) to generate an imagedesired by a physician. This scan or examination process is completedwith a plurality of scanning elements, which correspond to differentsubsystems, each having a unique way to maintain its log files. Thesesubsystems that cooperate to complete a scan are referred to as animaging chain. The tasks of respective subsystems are recorded in logfiles, forming semantics of their own.

Log file analysis is rather trivial and time consuming. A large amountof information is hidden in the log files, which are then scatteredamong various subsystems. Moreover, the relationship among these logfiles is so complicated that ordinary technicians would find it hard tocollect desired information from these related log files, not to mentionanalyze these log files for troubleshooting. The information hidden inthe log files is significant, but there have not yet been a simple andaccurate method to read this information. Although some log analysissystems have been proposed in the art, they generally demand operationsof skilled engineers of specific fields and expertise. This undoubtedlycauses high cost and difficulty to the use and operation of the system.

Additionally, log files are conventionally searched and analyzed basedon syntax and format, that is, log files are simply analyzed byexamining whether or not they include the search keyword. That is, theexisting technology fails to interpret the semantic of every item ofinformation itself, not to mention the relationship among log filesbased on the semantics thereof. Consequently, when awaiting a log fileanalysis result, a user is only given a large amount of discrete data,which has hardly any relationship. Besides, the result is not presentedvia a clear and simple interface, and thus hard to read, only toincrease difficulty in troubleshooting, analysis and resolution.

Therefore, there exists a need in the art for a method and device foraddressing the foregoing problems.

SUMMARY OF THE INVENTION

According to one embodiment of the present invention, a method forsearching and displaying scattered logs is proposed, which comprises:finding out one or more corresponding log data based on a searchkeyword; determining a desired timestamp from the log data, andregarding the log data containing the timestamp as target data;searching a semantic file for related semantic data based on the searchkeyword, and finding out related log data based on the related semanticdata; time filtering the related log data to obtain filtered log data;establishing a coordinate system by mapping the target data and thefiltered log data onto mapping points of the coordinate system;semantically linking the filtered log data, and dying the filtered logdata and the target data; and counting the number of lines related tothe target data and the filtered log data, and generating links thereto.

In an embodiment of the present invention, determining a desiredtimestamp from the log data comprises selecting log data containing thetimestamp from a plurality of corresponding log data, or obtaining thetimestamp according to a preset time period.

In an embodiment of the present invention, the semantic file is an XMLsemantic file or other structured data files which define semantic datarelated to the search keyword.

In an embodiment of the present invention, time filtering the relatedlog data to obtain filtered log data comprises time filtering therelated log data based on the timestamp.

In an embodiment of the present invention, the related log data within atime period around the timestamp is selected as the filtered log data.

According to an embodiment of the present invention, establishing acoordinate system by mapping the target data and the filtered log dataonto mapping points of the coordinate system comprises: establishing anX-axis representing time and Y-axis representing processing steps; andmapping the target data and the filtered log data onto mapping points inthe coordinate system according to corresponding time information andprocessing step information.

According to an embodiment of the present invention, some of the mappingpoints are connected to form a waveform.

According to an embodiment of the present invention, semanticallylinking the filtered log data, and dying the filtered log data and thetarget data comprise: determining semantic closeness between thefiltered log data and the search keyword, the semantic closeness beingdetermined based on the level of conversion to show semantic relevance.

According to an embodiment of the present invention, the target data isdyed red, system logs dyed blue; log data having semantic relevance ofLevel One dyed yellow, and the rest log data gray.

Counting the number of lines related to the target data and the filteredlog data, and generating links thereto comprise counting the number oflog data related to the keyword and the related semantic data, andgenerating links to said log data.

According to an embodiment of the present invention, the proposed methodfurther comprises displaying, at the mapping points, the number ofcorresponding related lines

According to an embodiment of the present invention, a device forsearching and displaying scattered logs is proposed, which comprises: alog searching component for finding out one or more corresponding logdata based on a search keyword; a timestamp determining component fordetermining a desired timestamp from the log data, and regarding the logdata containing the timestamp as target data; a related semantic datasearching component for searching a semantic file for related semanticdata based on the search keyword, and finding out related log data basedon the related semantic data; a filtering component for time filteringthe related log data to obtain filtered log data; a mapping componentfor establishing a coordinate system by mapping the target data and thefiltered log data onto mapping points of the coordinate system; a dyecomponent for semantically linking the filtered log data, and dying thefiltered log data and the target data; and a counting component forcounting the number of lines related to the target data and the filteredlog data, and generating links thereto.

In an embodiment of the present invention, the timestamp determiningcomponent selects log data containing the desired timestamp from aplurality of corresponding log data, or obtains the desired timestampaccording to a preset time period.

In an embodiment of the present invention, the filtering component timefilters the related log data based on the timestamp.

In embodiment of the present invention, the filtering component selectsthe related log data within a time period around the timestamp as thefiltered log data.

In an embodiment of the present invention, the mapping componentestablishes an X-axis representing time and Y-axis representingprocessing steps; and maps the target data and the filtered log dataonto mapping points in the coordinate system according to correspondingtime information and processing step information.

In an embodiment of the present invention, the mapping componentconnects some of the mapping points to form a waveform.

According to an embodiment of the present invention, the dye componentdetermines semantic closeness between the filtered log data and thesearch keyword based on the level of conversion to show semanticrelevance.

According to an embodiment of the present invention, the dye componentdyes the target data red, system logs blue; log data having semanticrelevance of Level One yellow, and the rest log data gray.

In an embodiment of the present invention, the counting component countsthe number of log data related to the keyword and the related semanticdata, and generates links to said log data.

In an embodiment of the present invention, the counting componentfurther displays, at the mapping points, the number of correspondingrelated lines.

The method and device proposed in the present invention conduct searchesbased on semantic of the imaging chain, and presents logs andrelationship among the logs in a simple coordinate system, therebyreducing the work load on an engineer and increasing efficiency introubleshooting. Besides, the present invention makes it possible to getknowledge of physicians' habits in using a product and to optimizeworkflow of the product.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 is a flow chart of a method for searching and displayingscattered logs according to the present invention;

FIG. 2 is a user interface displaying examination log data acquiredusing the method as shown in FIG. 1;

FIG. 3 is a user interface displaying examination log data and systemlog data acquired using the method as shown in FIG. 1;

FIG. 4 is a diagram for troubleshooting;

FIG. 5 shows information related to the troubleshooting as shown in FIG.4; and

FIG. 6 illustrates a device for searching and displaying scattered logsaccording to the present invention.

DETAILED DESCRIPTION OF THE INVENTION

The present invention will be more apparent from the following detaileddescription of the embodiments by reference to the drawings. Apparently,these embodiments are not exhaustive. Other embodiments, which theordinary skilled artisan derive from the given embodiments withoutexercising inventive skills, also fall into the scope of the presentinvention.

FIG. 1 is a flow chart of a method for searching and displayingscattered logs according to the present invention. Tasks of respectivesubsystems of a medical imaging device are recorded in log files, whichare scattered among these subsystems. Therefore, the medical imagingdevice knows from which directories to read the log files of thesesubsystems, and from which to read log files of external systems. Thelog files of external systems refer to log files of those generalsystems for supporting the medical imaging device (for example, LINUSsystem, computer hardware units, etc.).

At Step 101, a keyword is inputted to find out one or more correspondinglog data. According to one embodiment of the present invention, a userinputs a search keyword through a user interface. Based on the searchkeyword, the system finds out, from relevant directories, one or morelog data that is directly related to the keyword. In an embodiment, thesearch keyword may instead be preset in a file, and automatically runsin the case of a system event, for example, shutdown of the system.

At step 102, a desired timestamp is determined from the log data, andthe log data containing the desired timestamp is considered as targetdata. In other words, the log data, which is directly semanticallylinked and moreover falls within the desired time domain, is selectedout of the log data, and regarded as target data. The target data refersto the log data in a log that is directly linked to the search keyword,rather than those which are only related upon conversion. For example,when a user inputs the keyword “shutdown”, there must be one or more logdata in the log files which completely matches with this keyword. Thiscompletely matching log data is referred to as target data. According toone embodiment of the present invention, the system may present the oneor more corresponding log data, and the user then clicks to select thelog that contains the desired timestamp. For example, if the systemfinds three items of log data that completely matches, which aregenerated at the time of 11:11:11 Jun. 10, 2012, 11:11:11 Aug. 10, 2012,and 11:11:11 Oct. 10, 2012 respectively, and if a user wishes to viewthe latest log data, the user may click the log data with the timestampof 11:11:11 Oct. 10, 2012. According to an embodiment, a desiredtimestamp is obtained according to a preset time domain. For example, auser may input a time period while inputting the keyword, for example,from 1 o'clock to 12 o' clock on Oct. 10, 2012. The system willautomatically select, out of a plurality of log data, the one within theinputted time period, i.e., the log data that contains the timestamp of11:11:11 Oct. 10, 2012, and obtains the desired timestamp from the logdata. The system then regards the log data with the desired timestamp asthe target data.

At Step 103, a semantic file is searched for related semantic dataaccording to the keyword, and then from the related semantic data,related log data is found out.

For a medical imaging device, its main goal is make examinations one byone successfully. These examinations are interrelated with one another.In the present invention, semantics of completing an examination aredefined as a semantic unit on an imaging chain, such that the logs thatare scattered among various subsystems are organized according to theirmeanings Thereby, a flow of steps for the examination may bespecifically determined, facilitating quantitive and qualitativeanalysis on each single examination. A single examination is taken as aunit in the present invention and compared with the other examinationsalong a time axis or a processing step axis, such that the workflow ismore direct and apparent. The semantics of an examination aredistributed among every subsystem as a series of logs.

The present invention employs a semantic file, which defines semanticdata that relates to the search keyword. In one embodiment, the semanticfile includes, but is not limited to, an XML semantic file or otherstructured data files. For example, semantics data that relates to thekeyword “shutdown” includes {“tgp error”, “Scout Fail” and “ifconfig”}.By taking “tgp error”, “Scout Fail”, and “ifconfig” as new keywords, thelog file is further searched for related log data. Therefore, based onthe keyword and the related semantic data, the user may convenientlyidentify direct subsystems that may relate to the problem, and comparethem with semantically related systems, and eventually show systematicinformation (rather than discrete and incomplete information) on asingle map.

The related log data is time filtered at Step 104 to obtain the filteredlog data. As a large amount of related log data may be acquired at Step103, there is a need to filter this large amount of data based on time.According to one embodiment of the present invention, the related logdata is filtered based on the desired timestamp. In particular, based onthe timestamp determined at Step 102, the related log data that iswithin a time period around that timestamp is selected as the desired,filtered log data. For example, if Step 102 determines 11:11:11 Oct. 10,2012 as the desired timestamp, the related log data within 5 hoursaround the timestamp is selected, that is, the filtered log data fallswithin the time period between 6:11:11 Oct. 10, 2012 and 11:11:11 Oct.10, 2012. The particular duration of the time period (for example, fivehours as mentioned above) may be preset by the system or inputted by theuser. In an embodiment of the present invention, the user may input atime period when inputting a search keyword, for example, from 1 o'clockto 15 o'clock, Oct. 10, 2012. Based on the inputted time period, thesystem automatically selects, out of the related log data, those thatcontains the inputted time period.

Subsequently, a coordinate system is established at Step 105, with thetarget data and the filtered log data being mapped onto thecorresponding points of the coordinate system.

According to one embodiment of the present invention, the establishmentof the coordinate system comprises setting up an X-axis representingtime, and a Y-axis representing processing steps. Take the time periodat Step 104 as an example. The origin of the X-axis may be set to6:11:11 Oct. 10, 2012, and the X-axis comprises the time period between6:11:11 Oct. 10, 2012 and 16:11:11 Oct. 10, 2012. Persons skilled in theart would appreciate that the origin of the X-axis may be set to 0, andthe time period between 6:11:11 Oct. 10, 2012 and 16:11:11 Oct. 10, 2012may be represented by a numerical number. For example, the number “1”denotes one hour, and numbers “0” through “9” are used on the X-axis torepresent the time period between 6:11:11 Oct. 10, 2012 and 16:11:11Oct. 10, 2012. The present invention is not limited to any particularpresentations of the time periods.

An examination with a medical imaging device involves a plurality ofsubsystems, which may be responsible for respective processing steps.For example, subsystem A conducts Step 1; subsystem B Step 2; andsubsystem C Step 3. The Y-axis is established to represent theseprocessing steps. The filtered log data comprises system logs and logsof various subsystems of the medical imaging device. As both the targetdata and the subsystem logs contain time information and both of themare created by corresponding subsystems, they may be mapped onto thecorresponding points of the coordinate system based on their respectivetime information and processing steps. The system logs may be mappedonto respective points of the coordinate system according to the timeinformation. In one embodiment of the present invention, the coordinatepoints in the coordinate system onto which the target data and thefiltered log data are mapped may be represented by circles. In anembodiment, they may be represented by a rectangle, or a diamond, etc.The embodiments of the present invention are not limited to anyparticular shapes.

According to an embodiment of the present invention, after mapping thetarget data and the subsystem logs to the coordinate system, theplurality of mapping points may be connected to generate a waveform forease of the user's view. Since a plurality of examinations may be donein a particular time period around the desired timestamp, oneexamination, i.e., one semantic unit, is regarded as a unit of thewaveform. The time points at which each examination (one waveform)begins and ends may be read from the log file, and shown on the timeX-axis. The mapping points within the waveform may be connected with oneanother by a dotted line and a solid line. As shown in the waveform, thesolid line is used to horizontally connect the log data, which isgenerated by the subsystems conducting corresponding processes.According to an embodiment, these mapping points may be connected into adifferent shape for the sake of view by the user, and some auxiliarylines may be additionally used to connect these mapping points. Whatparticular shapes are used should not be construed as a limitation tothe present invention.

According to an embodiment, the system logs may be shown, if deemednecessary. For example, if necessary, a user may choose, over the userinterface, whether to show the system logs. In the present invention,when the system logs are displayed, they are not shown in the waveform,but in the exterior to the waveform such that the relationship betweenthe primary section and the secondary section of the system is instantlyclear.

At Step 106, the filtered log data is linked in terms of semantics, andthen dyed together with the target data. In the present invention, it isdetermined as to how closely the semantic of the filtered log data isrelated to the search keyword. In particular, this closeness in semanticis evaluated by determining the level of conversion to show semanticrelevance. For example, if the keyword is “shutdown”, the relatedsemantic may include { “tgp error”, “Scout Fail”, “ifconfig”}, etc,among which “tgp error” is fatal to the system. If “tgp error” occurs,it may cause the system to directly shut down. In this case, “tgp error”is considered to represent top semantic relevance, i.e., Level One, andthe corresponding log is dyed “yellow”. As to “ifconfig”, there ischance that it may result in “shutdown”, but that is dependent onwhether it has impact on the key setting “Dataacq” on the semanticchain. If it does have impact, a further decision needs to be made as towhether “Scout” is affected. In this case, although “ifconfig” isrelated to “shutdown”, the semantic relevance is shown only upon threelevels of conversion, i.e., semantic relevance of Level Three. In thiscase, a gray color may be used instead to denote a relatively lesssemantic closeness. In one embodiment of the present invention, thetarget data is dyed “red” while the system log data dyed “blue”. The logdata having semantic relevance of Level One is dyed yellow, and the restgray. In an embodiment, the target data is dyed red, while the systemlog data blue. The log data having semantic relevance of Level One isdyed yellow, while the rest levels (Level Two through Level Sixgenerally) are dyed respective colors (which may be set). The other logdata that is not semantically related but falls within the same timeperiod is dyed grey. The aforesaid colors are only illustrated todifferentiate different log data, and it would be appreciated thatdifferent colors may be used. That is, what particular colors are usedshould not be considered to limit the present invention.

Then, Step 107 counters the number of lines related to the target dataand the filtered log data, and generates links thereto. The number ofrelated lines refers to the log data that is related to the searchkeyword. The present invention counts the number of log data that isrelated to the keyword and to the related semantic data, and generateslinks to these log data. Consequently, when the user clicks the mappingpoints, the user will be given links to these log data, which is thenpresented before the user. According to one embodiment of the presentinvention, the number of related lines may be shown at respectivemapping points for ease of the user's view. When the user clicks themapping points, the user will be given links to these log data, which isthen presented before the user. What is also shown is what the user hasdone to create these log data, such that the user may conveniently viewand analyze the log data.

According to an embodiment of the present invention, beside all of themapping points are shown the number of respective related lines. In anembodiment of the present invention, the number of related lines isindicated only beside the mapping points that correspond to the systemlog data only, or only beside the log data having semantic relevance ofLevel One. Persons skilled in the art would be able to choose andconfigure the elements to be shown on the user interface according tocircumstance.

FIG. 2 shows a user interface that shows examination log data obtainedaccording to the method as shown in FIG. 1. As shown in FIG. 2, anexamination is defined as a semantic unit. There are in total threeexamination semantic sequences. The red circle (i.e., the target data)represents an error containing log, while the yellow circle (i.e., thelog data having semantic relevance of Level One) indicates a log thatcontains warning or abnormality. FIG. 2 does not show system log or thenumber of related lines beside the log data.

FIG. 3 illustrates a user interface showing examination log data andsystem log data obtained using the method as shown in FIG. 1. Ascompared with FIG. 2, FIG. 3 additionally shows system log with a bluecircle as well as the number of lines related to the system log.

The embodiments employed in the present invention are able to quicklyanalyze the log files for troubleshooting. As shown in FIG. 3, shownaround the error containing log are in total three logs that containwarning or abnormality. By clicking these logs the user may be able toidentify the trouble. FIG. 4 illustrates an example of troubleshooting.As is shown, by clicking the system log accompanied by the number “3”,the system provides a link to the system log, and shows what the userhas done to create these system logs. FIG. 5 shows these system logs,and presents before the user what has been done to generate these systemlogs.

In view of the above, the method proposed in the present inventionconducts search based on the semantic of an imaging chain, and displaysthe logs and relationship therebetween in a simple coordinate system. Asa result, engineers are able to quickly analyze the logs fortroubleshooting, which thereby increase the efficiency introubleshooting and reduce the workload of the engineers.

Additionally, the present invention makes it possible that an engineermay have knowledge of how a physician uses a medical imaging device byviewing an examination waveform, which may optimize the workflow of aproduct. In the present invention, a medical imaging device may scan ahead of a human being. When the engineer inputs a keyword such as “headscan”, the waveforms of a series of head scan examinations around acertain time point may be generated. The time it takes to complete anexamination should be the same, i.e., the length of time shown in thewaveform should be the same. If a waveform has a time length that isobviously different from the other examinations, the logs may be viewedto examine the physician's operational habit, which can optimize theworkflow of a product. In addition, in this embodiment, if a waveformhas a time length that is obviously different from the otherexaminations, the engineer may reasonably assume that the scan at issueruns potential risks or problems, and may view the logs to locate thesepotential problems and determine appropriate solutions quickly.

Given the foregoing disclosure of the present invention, persons skilledin the art would appreciate that the present invention is suited forsearching and displaying log data within a plurality of time periods. Inaccordance with one embodiment of the present invention, a user mayinput a plurality of time periods when inputting a keyword, or select aplurality of desired timestamps, or both. After selecting related logdata within a plurality of time periods, the plurality of time periodsmay be established along the positive direction of the X-axis.Subsequently, the target data and the filtered log data are mapped tothe coordinate system within these time periods, such that the semanticwaveforms within different time periods according to the same keywordmay be displayed in the same coordinate system, facilitating the viewand comparison of the engineers.

In view of the foregoing descriptions, persons skilled in the art wouldunderstand that the present invention is additionally suited for asearch using a plurality of keywords. In an embodiment of the presentinvention, the user may input a plurality of keywords through the userinterface, and find out a plurality of corresponding log data based onthe plurality of keywords. A plurality of desired timestamps isdetermined from the log data, and the log data containing thesetimestamps is regarded as target data. Accordingly, related semanticdata is located from semantic files based on the plurality of keywords,which data is then used to find out related log data. The related logdata is time filtered to obtain the filtered log data. Thereafter, acoordinate system is established by mapping the plurality of target dataand the filtered log data onto the mapping points in the coordinatesystem. In particular, a plurality of time periods may be indicatedalong the positive direction of the X-axis to correspond to theplurality of target data. Then the plurality of target data and filteredlog data are mapped to the proper time periods. The filtered log dataare linked based on semantics, and then dyed together with the targetdata. Finally, the number of lines related to the target data and thefiltered log data is counted, and proper links are generated. By usingthe foregoing method, a semantic waveform related to a plurality ofkeywords may be shown in the same coordinate system to better meet theuser's needs. The aforesaid establishing a plurality of time periodsalong the positive direction of the X-axis is illustrated as an exampleonly. That is, these time periods may be also established along thenegative direction of the X-axis, and it only needs to distinguishbetween these time periods. This should not be construed as a limitationto the present invention.

FIG. 6 illustrates a device 600 for searching and displaying scatteredlogs. Device 600 comprises: a log searching component 601 for searchingone or more corresponding log data based on a keyword; a timestampdetermining component 602 for obtaining a desired timestamp from the logdata, and regarding the log data containing the timestamp as targetdata; a related semantic data searching component 603 for searching asemantic file for related semantic data based on the keyword, andfinding out related log data according to the related semantic data; afiltering component 604 for time filtering the related log data toobtain filtered log data; a mapping component 605 for establishing acoordinate system by mapping the target data and the filtered log dataonto corresponding mapping points in the coordinate system; a dyecomponent 606 for semantically linking the filtered log data and dyingthe filtered log data and target data; and a counting component 607 forcounting lines related to the target data and the filtered log data andgenerating links thereto. The semantic file may be an XML semantic fileor other structured data files, which defines semantic data related tothe keyword.

The timestamp determining component selects the log data containing adesired timestamp from a plurality of corresponding log data, ordetermines a desired timestamp according to a preset time period. Thefiltering component time filters the related log data based on thedetermined timestamp. In particular, the filtering component selects therelated log data that falls within a time period around the desiredtimestamp as the filtered log data. The mapping component establishes anX-axis denoting time and a Y-axis denoting processing steps, and mapsthe target data and the filtered log data onto the corresponding mappingpoints in the coordinate system based on respective time information andprocessing steps. The mapping component connects some of the mappingpoints to generate a waveform. The dye component determines the semanticcloseness between the filtered log data and the keyword based on thelevel of conversion to show semantic relevance. Thereafter, the dyecomponent dyes the target data red while the system log blue, the logdata having semantic relevance of Level One red, while the rest gray.The counting component determines the number of log data that is relatedto the keyword and the semantic data thereof, and generates links tothese log data. The counting component also displays the number ofrelated lines at the corresponding mapped points.

The methods proposed in the present invention may be implemented byhardware, software, and firmware or any combinations thereof. Theaforesaid embodiments of the present invention are illustrative only,and should not be construed to limit the scope of the present invention.Any equivalent alterations to the structure or workflow made based onthe description and the figures of the present invention, or any director indirect applications of the present invention to other relevanttechnical fields are also considered to fall into the scope of thepresent invention.

What is claimed is:
 1. A method for searching and displaying data fromscattered logs of a medical imaging device and a set of subsystemsthereof, the method comprising: identifying log data from the medicalimaging device and the set of subsystems based on a keyword; selecting atimestamp, and in response to the selecting, providing target dataassociated with the timestamp, wherein the target data is included inthe log data; searching a set of semantic files, each semantic file fromthe set of semantic files being associated with a correspondingsubsystem of the set of subsystems for related semantic data based onthe keyword, and finding out related log data based on the relatedsemantic data; time filtering the related log data to obtain filteredlog data, the filtered log data comprising at least one system log and asubsystem log from the medical imaging device; establishing a coordinatesystem by mapping the target data and the filtered log data onto mappingpoints of the coordinate system; semantically linking the filtered logdata, and dying the filtered log data and the target data; and countingthe number of lines related to the target data and the filtered logdata, and generating links thereto, and wherein the step of mappingcomprises: establishing an X-axis representing time and a Y-axisrepresenting process steps, and mapping the target data and the filteredlog data onto mapping points of the coordinate system according tocorresponding time information and processing step information.
 2. Themethod according to claim 1, wherein selecting the timestamp includesobtaining the timestamp according to a preset time period.
 3. The methodaccording to claim 1, wherein a semantic file from the set of semanticfiles is an XML semantic file or other structured data files whichdefine semantic data related to the keyword.
 4. The method according toclaim 1, wherein time filtering the related log data includes timefiltering the related log data based on the timestamp.
 5. The methodaccording to claim 4, further comprising: selecting the related log datawithin a time period around the timestamp as the filtered log data. 6.The method according to claim 1, wherein some of the mapping points areconnected to form a waveform.
 7. The method according to claim 1,wherein semantically linking the filtered log data and dying thefiltered log data and the target data comprise: determining semanticcloseness between the filtered log data and the keyword, the semanticcloseness being determined based on the level of conversion.
 8. Themethod according to claim 7, wherein the target data is dyed red, systemlogs dyed blue, log data having semantic relevance of Level One dyedyellow, and the rest log data dyed gray.
 9. The method according toclaim 1, wherein the counting the number of lines related to the targetdata and the filtered log data, and generating links thereto comprise:counting the number of log data related to the keyword and the relatedsemantic data, and generating links to the log data.
 10. The methodaccording to claim 9, further comprising: displaying, at the mappingpoints, the number of corresponding related lines.
 11. A system forsearching and displaying data from scattered logs of a medical imagingdevice and a set of subsystems thereof, the system comprising: a logsearching component configured to determine log data from the medicalimaging device and the set of subsystems based on a keyword; a timestampdetermining component configured to select a timestamp, and in responseto selecting the timestamp, provide target data associated with thetimestamp, wherein the target data is included in the log data; arelated semantic data searching component configured to search a set ofsemantic files, each semantic file from the set of semantic files beingassociated with a corresponding subsystem of the set of subsystems, forrelated semantic data based on the keyword, and to find related log databased on the related semantic data; a filtering component for timefiltering the related log data to obtain filtered log data, the filteredlog data comprising at least one system log and a subsystem log from themedical imaging system; a mapping component for establishing acoordinate system by mapping the target data and the filtered log dataonto mapping points of the coordinate system, the mapping includingestablishing an X-axis representing time and a Y-axis representingprocess steps, and mapping the target data and the filtered log dataonto the mapping points according to corresponding time information andprocessing step information of the examination; a dye component forsemantically linking the filtered log data, and dying the filtered logdata and the target data; and a counting component for counting thenumber of lines related to the target data and the filtered log data,and generating links thereto.
 12. The system according to claim 11,wherein the timestamp determining component selects obtains thetimestamp according to a preset time period.
 13. The system according toclaim 11, wherein a semantic file from the set of semantic files is anXML semantic file or other structured data files which define semanticdata related to the keyword.
 14. The system according to claim 11,wherein the filtering component time filters the related log data basedon the timestamp.
 15. The system according to claim 14, wherein thefiltering component selects the related log data within a time periodaround the timestamp as the filtered log data.
 16. The system accordingto claim 11, wherein the mapping component connects some of the mappingpoints to form a waveform.
 17. The system according to claim 11, whereinthe dye component determines semantic closeness between the filtered logdata and the keyword, the semantic closeness being determined based onthe level of conversion to show semantic relevance.
 18. The systemaccording to claim 17, wherein the dye component dyes the target datared, system logs blue, log data having semantic relevance of Level Oneyellow, and the rest log data gray.
 19. The system according to claim11, wherein the counting component counts the number of log data relatedto the keyword and the related semantic data, and generates links to thelog data.
 20. The system according to claim 19, wherein the countingcomponent further displays, at the mapping points, the number ofcorresponding related lines.